A Lynnwood, Washington-based debt-collection company has been sued for compromising the names and Social Security information of more than 3.7 million individuals in a data breach in April 2021.
Multiple lawsuits filed in federal court in Washington this week claim the firm, Receivables Performance Management, failed to notify impacted individuals of the breach for more than 18 months.
RPM's attorney Brian Middlebrook, a partner at New York-based law firm Gordon Rees Scully Mansukhani, said the company apologizes for the inconvenience the incident has caused. RPM conducted an investigation before notifying the affected individuals last month, Middlebrook said.